Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
File: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft (raw, json)
Hash identifier: qS4E8Ci0/jaNHO3ZcTKp6eY+Ubhc12kRT2VCYIs8cmQ=
Subject key identifier: B0:F1:C6:E9:60:FF:56:88:6B:C2:A7:F3:D7:C4:7F:8B:3A:D4:94:02
Authority key identifier: 49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
Certificate issuer: /CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Certificate serial: 01A0C58EC67CC3C5431CDC1AEF227E818D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
Manifest number: 030A
Signing time: Mon 21 Sep 2026 20:01:03 +0000
Manifest this update: Mon 21 Sep 2026 20:01:03 +0000
Manifest next update: Tue 22 Sep 2026 20:01:03 +0000
Files and hashes: 1: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl (hash: I0L7B2gIhdnf2lJ66Nd/MFmXm21hzeYUC3Vo+diMLp8=)
2: Z1MLI8tNzY6d4mU0MA4vsliznRQ.roa (hash: Hb0AvXt+7YtqdooEE/7Fg18JAVs1ie9AUIwS/98EVJs=)
3: wqC_NxiWyjJgLTJPPHhovqD7_pk.asa (hash: aMbvgTbGGGUalP6tB5y93mWncuZ7x+8sG7VUvXoPA50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:c6:7c:c3:c5:43:1c:dc:1a:ef:22:7e:81:8d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Validity
Not Before: Sep 21 20:01:03 2026 GMT
Not After : Sep 22 20:01:03 2026 GMT
Subject: CN=b0f1c6e960ff56886bc2a7f3d7c47f8b3ad49402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:82:64:6e:a7:35:ac:9d:c5:a5:e1:d7:20:
67:07:da:3e:7c:d2:1d:dc:ee:55:62:6a:5a:a3:55:
32:a5:35:d0:76:52:20:df:02:58:8f:5e:e8:76:f6:
f3:89:c2:e2:c3:ad:22:c7:ac:f5:b3:9c:85:3b:00:
45:76:44:59:09:32:e7:04:cd:69:56:b8:f7:55:a5:
0e:4c:82:de:6d:21:6b:87:90:41:79:c9:2d:5a:32:
bb:02:69:2a:6c:d5:6a:7b:a7:dd:24:6b:31:37:d0:
06:d7:d1:26:9e:44:58:d0:56:bd:0e:07:4a:3b:9e:
ca:20:b0:2c:4b:a2:22:1f:40:e4:d5:94:68:c9:7f:
ca:50:c3:e1:d1:29:ec:86:57:28:79:13:7c:c3:05:
30:d4:6a:4b:ca:49:05:79:51:ba:87:b6:0a:4f:06:
5a:3e:70:4b:21:8b:15:2c:6e:63:6e:81:d3:45:b0:
f8:7f:ed:97:97:13:d8:a0:7f:9b:a2:d2:52:35:d8:
31:31:26:31:43:70:81:1c:63:6c:c1:d5:94:52:d5:
7f:ba:9e:72:66:67:c5:c8:4a:e2:7d:69:46:e2:34:
87:fb:7f:7f:8c:d7:d3:64:d9:c3:55:06:30:13:8f:
84:66:83:c3:0f:2d:e7:ab:45:1a:db:5b:54:83:a3:
47:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F1:C6:E9:60:FF:56:88:6B:C2:A7:F3:D7:C4:7F:8B:3A:D4:94:02
X509v3 Authority Key Identifier:
keyid:49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:db:04:db:02:c2:aa:86:0b:f1:ea:ea:82:b5:5d:ce:87:47:
b2:49:cb:59:dc:e7:26:66:28:fa:8a:2b:94:0d:14:fc:7b:f6:
18:66:ef:0b:25:b4:6c:4f:46:52:1c:c8:c7:72:4c:9d:94:89:
82:10:66:7b:ce:c2:8a:de:b2:b7:0e:15:03:04:67:c6:c2:5c:
12:e9:86:db:e2:63:a5:eb:65:7d:bf:dc:a8:eb:43:91:28:f7:
26:88:d2:1e:9f:23:4c:27:16:1d:ac:85:45:e9:df:34:2e:a1:
06:1d:3a:01:89:39:dc:06:c5:f0:5c:ad:06:69:44:bf:ce:58:
38:62:d4:f8:58:0a:20:08:67:28:22:57:0a:8d:9b:0c:cd:e6:
ad:de:9c:9d:cf:8a:27:ac:5d:e4:26:1d:a4:b2:cd:37:17:b0:
86:ad:b2:c8:a0:90:f1:0e:c5:e3:a4:25:cf:b9:50:70:01:0d:
b5:d8:04:8a:87:56:e4:38:67:b0:2a:14:46:0d:db:56:89:f9:
2f:d1:f6:f4:45:f7:22:1a:e8:d0:0e:34:40:28:43:eb:d1:25:
20:e6:79:b0:67:ca:b2:b8:00:66:91:fe:0e:ec:ac:be:16:c9:
56:c0:48:9c:ae:9f:da:4d:e7:c7:f3:75:71:2d:90:17:5c:33:
ee:ce:08:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFjsZ8w8VDHNwa7yJ+gY2GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MTc1ODc3M2E5OWU3NzFiOTBjYTliYjIyZjdmY2FkYmZi
NjMyNDgwHhcNMjYwOTIxMjAwMTAzWhcNMjYwOTIyMjAwMTAzWjAzMTEwLwYDVQQD
EyhiMGYxYzZlOTYwZmY1Njg4NmJjMmE3ZjNkN2M0N2Y4YjNhZDQ5NDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsheCZG6nNaydxaXh1yBnB9o+fNId
3O5VYmpao1UypTXQdlIg3wJYj17odvbzicLiw60ix6z1s5yFOwBFdkRZCTLnBM1p
Vrj3VaUOTILebSFrh5BBecktWjK7AmkqbNVqe6fdJGsxN9AG19EmnkRY0Fa9DgdK
O57KILAsS6IiH0Dk1ZRoyX/KUMPh0SnshlcoeRN8wwUw1GpLykkFeVG6h7YKTwZa
PnBLIYsVLG5jboHTRbD4f+2XlxPYoH+botJSNdgxMSYxQ3CBHGNswdWUUtV/up5y
ZmfFyErifWlG4jSH+39/jNfTZNnDVQYwE4+EZoPDDy3nq0Ua21tUg6NHjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDxxulg/1aIa8Kn89fEf4s61JQCMB8GA1UdIwQY
MBaAFEkXWHc6medxuQypuyL3/K2/tjJIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1JkWWR6cVo1M0c1REttN0l2ZjhyYi0yTWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lOGM2NzItZGExYS00MTMzLTkyMWUt
ZTdkYjk1ZTNiY2M0LzEvU1JkWWR6cVo1M0c1REttN0l2ZjhyYi0yTWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9lOGM2NzItZGExYS00MTMzLTkyMWUtZTdkYjk1ZTNiY2M0
LzEvU1JkWWR6cVo1M0c1REttN0l2ZjhyYi0yTWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNsE2wLC
qoYL8erqgrVdzodHsknLWdznJmYo+oorlA0U/Hv2GGbvCyW0bE9GUhzIx3JMnZSJ
ghBme87Cit6ytw4VAwRnxsJcEumG2+Jjpetlfb/cqOtDkSj3JojSHp8jTCcWHayF
RenfNC6hBh06AYk53AbF8FytBmlEv85YOGLU+FgKIAhnKCJXCo2bDM3mrd6cnc+K
J6xd5CYdpLLNNxewhq2yyKCQ8Q7F46Qlz7lQcAENtdgEiodW5DhnsCoURg3bVon5
L9H29EX3Ihro0A40QChD69ElIOZ5sGfKsrgAZpH+DuysvhbJVsBInK6f2k3nx/N1
cS2QF1wz7s4Ijw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 00:18:21 2026 by rpki-client